Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
File:                     QQSkCCHEF2zELiVe9sFydHPD8Ao.mft (raw, json)
Hash identifier:          GHE3R8gaKaOS8tLXIl6iTNySo0yye6OhnV/dVHtBVV8=
Subject key identifier:   22:2D:12:FA:C1:41:5B:4D:72:03:4E:7F:5B:BA:FF:E3:05:EE:8E:66
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Certificate issuer:       /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial:       0195E0B433C1F9AC9F9A0420E67B972553E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
Manifest number:          14D9
Signing time:             Sat 29 Mar 2025 07:01:00 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:00 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:00 +0000
Files and hashes:         1: 0esZKuZd06vTF3egbk7SFqajsIo.roa (hash: P0O/NDwq3sTeK/AsSKKPK6Qr+cdWA34yW0U7UgVxZHg=)
                          2: 1-F-5SWsecFgzI5NahgeczUF5j-k.roa (hash: AjzylbQuDtMZ4CoZ2EqAKKte+m5xBNBNs+Oy65Y8EM0=)
                          3: 18mEs4Z6fHdJG430-23p2cFj4nQ.roa (hash: XgIw9SVi9pdHmgi87nMtAixIsiQxYMsUyuBvpp1vRoM=)
                          4: 4URO2C3ml1u1p3j0aVym-OypCmw.roa (hash: FBodq3AGj9I/WrFusJYGhp0BteIh9N9SY38AbrciYWk=)
                          5: 4kN15Qz33KWG-k_wyu7EQgr4Ils.roa (hash: DH8jYa3viVWroHhQ/Zl/Da/2bPMlT/7wPrIYxkW1NQg=)
                          6: 7qGCgpIfKLXoJsT35rezDziDBhA.roa (hash: 5kmqeNrinp9lsuCAyZflpq/OiszbJU7jNmzUel6IR+E=)
                          7: GAgtr-CLltTm3C54wjvqWFoClvc.roa (hash: T0Jdg0AtA8XIyCNcIqmAhfTPx4CQ0IlZ0iFHA879hp4=)
                          8: HiGziAUktoRlyueuC0_hHiCDmQ8.roa (hash: Zd8qY4C57ymLYCj+tu0BUy3+rQ0+nsTQu2oauKzI3OY=)
                          9: HxipHT46tv6qA61seP-3FDc3m84.roa (hash: dvYRTvtnN6xoSKyBzydQ1i2HWHdep/QnlIOV+ZIODek=)
                          10: JcQ4XnNNuhCFCptegJ4OikKt6EI.roa (hash: V4uiHg1qNVTGH4cwLosCcAcAuUHU5FHwvSgPuESRx7Y=)
                          11: Niv5CXzjZlzpP3fTeYmPHJ-i0lU.roa (hash: R9xWi9BNSSwcGXEc8iJXQHOFaaQnnZvq83WcJjO5BE8=)
                          12: QQSkCCHEF2zELiVe9sFydHPD8Ao.crl (hash: Jow0BD/cyIrbQAUbgdjr5aSeDYot2MnWAhdCexI88jA=)
                          13: QVpDsEjXaPZQ4FGjN9dHcrQXvHg.roa (hash: HCD6w2XxMAQn0SFhGHQKXXLIjCxVrY39/u5TIy7CNM8=)
                          14: Qx_J7jmO9FA5ot9sLpTDu4FLMuk.roa (hash: xVEwITmL9MXivRj3o3NBJyNSskTvQ/xcCcoWznjHvCA=)
                          15: RNDoaXvvOX22MpXmc3Ff_6K2Zr0.roa (hash: 9ScFJyBJ0ntBcGgka6vn0/EsUriLP41MonbDidIqsxk=)
                          16: UtpSRhJuNLlPda0ealCAV2oOOIs.roa (hash: 6zNva/R7MgFInq/rTlig5RzR+MH92GbfZMeRaso1csA=)
                          17: V8-ToP-No1rRKocG9Fs66tbVPI4.roa (hash: 3qNiQpHlS6gZhDgIm5wv39p+3u8Q/oiUqHr5QNsynkQ=)
                          18: aCzvft-4bbV7rBYNhvjtTU8ZwVY.roa (hash: LyfD0ZqEZ95kmtswsVkI/tj5kthO2U488G+9z2mp6gg=)
                          19: anyb0S2isVZ6Se4Mftij8iSLpPk.roa (hash: 8kZzLUilTF5CneX4LxuRFJNuwebJiucwE+f4bJOwZpY=)
                          20: cLHJ9pzG4jNGxgoAoRMirT2Ejso.roa (hash: Jzxa7wOrH3SZg3F+/QPuNnZeQarhGQ5yhFav2kPWjJ0=)
                          21: fBfUR6cRr_u4DYWWZmS_hYnQZ5Q.roa (hash: 05oduoCdD8sRASgQ0YU8ZbDS+ABzI42Cxlh4jYIQnOQ=)
                          22: g6Ig0jPNMe4MAMvjeIRw4JirdDE.roa (hash: T/0IJy2q1IYoff/aamZ+EqRudnpk7iGpLvKCXPLYje0=)
                          23: glVWs7IQA6E4icmC8qXaL1BO1oU.roa (hash: wAwxqn0T2Tg7SmJ7QKis7shqbxTq4mypLKV5b5C3kXg=)
                          24: kL3chxghDnQX5YSzwgkNCMx_3uM.roa (hash: ARDIceVeEM1YjdBNdcn8ziSYK6i63yZ+Nxd3mBgB/OM=)
                          25: khxB07onbtl0gHz8-6pLaDUUqYo.roa (hash: MoQ9KdSAj5hEESTK4yNZR+E8klzqWct22REysr25b/w=)
                          26: lKXrokKPFOF3aznjmWojVE7APiQ.roa (hash: PRGVlrmspET+S9gMw9HSgp3fT7nUxwmOOvlgERWds3M=)
                          27: lwFhyNroYMkQgFt_MTCY-0ovIkY.roa (hash: 1cg2wbluv89aBz3Ew/AMkAQmXEZmttxmEyT4CRchZCk=)
                          28: mGKAEj4vix5wz3Ty3D3Z9imeAeQ.roa (hash: 7m/WWG8HyJT1ynclkVB1QY12OwlKq+o8CXSQO/8ksHU=)
                          29: nGljitgno8Zg_3gTd1NL8ga4UlY.roa (hash: rg8O6DW4r5DhXeJAjPcwuhjgZqT37lpRRlPUN2MFmGk=)
                          30: pfnbvP54fI2mKR09iIt0xfdp0co.roa (hash: TpvSBeXjgBs6iHcMA91RD8MXDqtM3kW6rNOmftw2zXc=)
                          31: twN006NWSqIAzyJjBefGoakpUcI.roa (hash: Dw9Jbr5s1oT+R6tnGBJCmZXohfgBB+1HIADmJwaJ7IA=)
                          32: vz4FDF2gfGl5OFBOv__Tj3GzeKc.roa (hash: furrlju/pz4ChU7gEiXr6biSh/xldhy2BubaPv4xD0A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:33:c1:f9:ac:9f:9a:04:20:e6:7b:97:25:53:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
        Validity
            Not Before: Mar 29 07:01:00 2025 GMT
            Not After : Mar 30 07:01:00 2025 GMT
        Subject: CN=222d12fac1415b4d72034e7f5bbaffe305ee8e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f4:f9:01:a9:cd:5b:cc:a8:e0:b8:1f:91:71:
                    98:82:7c:e4:b4:02:da:5d:db:0e:18:32:76:8a:1d:
                    66:f9:d6:41:4c:75:24:dd:e8:a6:b3:f4:a3:82:10:
                    ce:ee:a6:f8:ed:58:30:da:7f:c8:36:e6:ee:77:37:
                    54:c4:ea:76:29:4d:b2:2c:46:c1:8f:5e:95:54:0a:
                    eb:82:e0:76:dd:3a:ae:9d:d1:81:d3:12:a7:df:75:
                    4a:fc:e0:e3:99:80:c5:11:f0:0e:0e:03:82:14:f3:
                    2b:a0:f4:bd:3a:11:7c:89:68:b9:f0:3e:e3:c6:90:
                    b0:e2:1a:d1:ff:1c:a6:d2:6c:68:3b:85:e8:a3:55:
                    db:0e:36:40:80:0e:37:1d:d6:0b:5a:65:7a:a4:d7:
                    2c:06:c3:5f:93:06:ff:17:47:b5:fe:30:55:08:88:
                    22:d4:c5:e4:5f:80:73:25:80:7c:a5:bd:ad:8a:c9:
                    16:e8:08:99:b6:d0:ac:dc:8a:51:a7:74:6c:d4:c5:
                    d2:5a:a5:85:57:e4:91:42:25:2d:35:90:22:5b:f3:
                    34:0e:f7:84:80:a3:22:91:b2:23:7b:b9:8c:96:ba:
                    58:dd:4d:ed:b5:b1:fe:20:db:d0:b3:19:0e:d1:70:
                    4c:a0:b4:c1:99:20:53:28:9a:8f:14:5a:40:d8:8b:
                    89:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2D:12:FA:C1:41:5B:4D:72:03:4E:7F:5B:BA:FF:E3:05:EE:8E:66
            X509v3 Authority Key Identifier:
                keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:87:0e:5d:c4:44:da:8b:66:43:91:dc:ac:b6:ed:0c:ae:c0:
         a5:52:d3:96:fa:cb:a2:ae:2c:3e:cb:55:89:ed:cc:d8:51:2f:
         fb:b0:32:24:bd:13:65:f9:8c:43:4d:73:28:89:73:9d:42:2b:
         7c:f3:07:4b:8d:d2:2e:84:bb:a6:07:ba:1a:ff:02:6d:d8:61:
         99:c7:eb:a4:80:a8:d9:05:d6:f5:8a:02:78:6c:2b:03:fc:a7:
         1e:e8:7e:a8:30:6f:62:20:fc:2f:ca:b3:77:a4:28:58:f5:9d:
         9d:71:00:b9:5c:f6:4f:54:28:de:6d:39:03:84:21:6c:42:28:
         3c:3f:f6:d2:07:d3:2b:8d:f9:af:15:fe:a7:55:22:62:84:64:
         ea:c0:4c:16:09:cf:06:3c:40:4c:7a:61:0e:24:e8:5c:2b:f0:
         4a:9e:53:27:40:84:ed:e6:1f:b4:5b:99:b5:4e:56:28:78:ae:
         18:f4:8e:4c:c3:bf:ec:a1:69:84:65:0a:f0:d1:e2:77:d1:e4:
         7a:6b:24:1c:4f:ca:32:e5:e1:f3:ec:a5:2f:82:ae:a3:c3:5e:
         a3:01:e4:4a:df:a0:70:8d:69:a4:57:79:f4:6d:11:56:09:e7:
         12:44:ac:50:e9:dc:2a:16:76:14:ec:87:74:56:cc:28:d9:25:
         97:70:9d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----